| github.com/containerd/containerd |
CVE-2024-25621 |
高危 |
v1.7.11 |
1.7.29 |
github.com/containerd/containerd: containerd local privilege escalation
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25621
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-06 19:15 修改: 2026-06-17 07:16
|
| github.com/containerd/containerd |
CVE-2026-53488 |
高危 |
v1.7.11 |
1.7.33 |
github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53488
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-07-01 02:17 修改: 2026-07-03 04:17
|
| github.com/distribution/distribution/v3 |
CVE-2026-33540 |
高危 |
v3.0.0-20230519140516-983358f8e250 |
3.1.0 |
github.com/distribution/distribution: Distribution: Information disclosure via improper validation of authentication realm URL
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33540
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-04-06 15:17 修改: 2026-06-17 10:37
|
| github.com/distribution/distribution/v3 |
CVE-2026-35172 |
高危 |
v3.0.0-20230519140516-983358f8e250 |
3.1.0 |
github.com/distribution/distribution: Distribution: Information disclosure via stale references after content deletion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35172
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-04-06 20:16 修改: 2026-08-17 12:18
|
| github.com/docker/docker |
CVE-2026-34040 |
高危 |
v27.1.1+incompatible |
29.3.1 |
Moby: Moby: Authorization bypass vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
|
| github.com/docker/docker |
CVE-2026-41567 |
高危 |
v27.1.1+incompatible |
|
docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-06-05 02:17 修改: 2026-08-17 12:18
|
| github.com/docker/docker |
CVE-2026-42306 |
高危 |
v27.1.1+incompatible |
|
github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
|
| github.com/go-git/go-billy/v5 |
CVE-2026-44973 |
高危 |
v5.6.1 |
5.9.0 |
github.com/go-git/go-billy: Go-billy: Arbitrary file access due to path traversal vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44973
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-28 22:16 修改: 2026-07-21 10:10
|
| github.com/go-git/go-git/v5 |
CVE-2026-45022 |
高危 |
v5.13.1 |
5.19.0 |
go-git is an extensible git implementation library written in pure Go. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45022
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:51
|
| github.com/go-git/go-git/v5 |
CVE-2026-71556 |
高危 |
v5.13.1 |
5.19.2 |
github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71556
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-08-07 17:17 修改: 2026-08-07 17:17
|
| github.com/moby/buildkit |
CVE-2026-33747 |
高危 |
v0.12.5 |
0.28.1 |
BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33747
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-03-27 01:16 修改: 2026-06-17 10:38
|
| github.com/moby/buildkit |
CVE-2026-33748 |
高危 |
v0.12.5 |
0.28.1 |
github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33748
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-03-27 15:16 修改: 2026-06-17 10:38
|
| github.com/moby/spdystream |
CVE-2026-35469 |
高危 |
v0.5.0 |
0.5.1 |
Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35469
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-04-16 22:16 修改: 2026-08-18 12:18
|
| github.com/opencontainers/runc |
CVE-2025-31133 |
高危 |
v1.1.13 |
1.2.8, 1.3.3, 1.4.0-rc.3 |
runc: container escape via 'masked path' abuse due to mount race conditions
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-31133
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-06 19:15 修改: 2026-06-17 09:09
|
| github.com/opencontainers/runc |
CVE-2025-52565 |
高危 |
v1.1.13 |
1.2.8, 1.3.3, 1.4.0-rc.3 |
runc: container escape with malicious config due to /dev/console mount and related races
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52565
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-06 20:15 修改: 2026-06-17 09:36
|
| github.com/opencontainers/runc |
CVE-2025-52881 |
高危 |
v1.1.13 |
1.2.8, 1.3.3, 1.4.0-rc.3 |
runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52881
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-06 21:15 修改: 2026-06-17 09:37
|
| github.com/opencontainers/selinux |
CVE-2025-52881 |
高危 |
v1.12.0 |
1.13.0 |
runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52881
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-06 21:15 修改: 2026-06-17 09:37
|
| github.com/sigstore/fulcio |
CVE-2025-66506 |
高危 |
v1.4.5 |
1.8.3 |
github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66506
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-12-04 22:15 修改: 2026-06-17 09:56
|
| github.com/sigstore/fulcio |
CVE-2026-49478 |
高危 |
v1.4.5 |
1.8.6 |
github.com/sigstore/fulcio: Fulcio: Server-Side Request Forgery and Kubernetes ServiceAccount token leakage
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49478
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-08-13 13:19 修改: 2026-08-15 04:18
|
| github.com/sigstore/rekor |
CVE-2026-48702 |
高危 |
v1.3.6 |
1.5.2 |
github.com/sigstore/rekor: Rekor: Denial of Service due to unbounded gzip decompression in Alpine APK parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48702
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-08-13 14:17 修改: 2026-08-13 16:18
|
| golang.org/x/crypto |
CVE-2025-47913 |
高危 |
v0.40.0 |
0.43.0 |
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47913
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-13 22:15 修改: 2026-06-17 09:28
|
| golang.org/x/crypto |
CVE-2026-39828 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39828
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:18
|
| golang.org/x/crypto |
CVE-2026-39829 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39829
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:18
|
| golang.org/x/crypto |
CVE-2026-39830 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39830
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:18
|
| golang.org/x/crypto |
CVE-2026-39831 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39831
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-39832 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39832
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:18
|
| golang.org/x/crypto |
CVE-2026-39835 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39835
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:18
|
| golang.org/x/crypto |
CVE-2026-42508 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42508
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:19
|
| golang.org/x/crypto |
CVE-2026-46595 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46595
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-18 12:19
|
| golang.org/x/crypto |
CVE-2026-46597 |
高危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46597
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/net |
CVE-2026-25681 |
高危 |
v0.42.0 |
0.55.0 |
golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25681
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
|
| golang.org/x/net |
CVE-2026-27136 |
高危 |
v0.42.0 |
0.55.0 |
golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27136
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
|
| golang.org/x/net |
CVE-2026-33814 |
高危 |
v0.42.0 |
0.53.0 |
net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-07 20:16 修改: 2026-08-18 12:18
|
| golang.org/x/net |
CVE-2026-39821 |
高危 |
v0.42.0 |
0.55.0 |
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 16:16 修改: 2026-08-18 12:18
|
| golang.org/x/net |
CVE-2026-46600 |
高危 |
v0.42.0 |
0.56.0 |
golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
|
| golang.org/x/text |
CVE-2026-56852 |
高危 |
v0.27.0 |
0.39.0 |
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56852
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-07-21 20:17 修改: 2026-07-23 18:27
|
| github.com/go-git/go-git/v5 |
CVE-2026-34165 |
中危 |
v5.13.1 |
5.17.1 |
github.com/go-git/go-git/v5: go-git: Denial of Service via crafted .idx file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34165
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-03-31 15:16 修改: 2026-07-24 21:10
|
| github.com/sigstore/rekor |
CVE-2026-23831 |
中危 |
v1.3.6 |
1.5.0 |
github.com/sigstore/rekor: Rekor denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23831
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-01-22 22:16 修改: 2026-06-17 10:22
|
| github.com/sigstore/rekor |
CVE-2026-24117 |
中危 |
v1.3.6 |
1.5.0 |
github.com/sigstore/rekor: Rekor Server-Side Request Forgery (SSRF)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24117
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-01-22 22:16 修改: 2026-06-17 10:22
|
| github.com/sigstore/sigstore |
CVE-2026-24137 |
中危 |
v1.8.4 |
1.10.4 |
github.com/sigstore/sigstore: sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24137
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-01-23 00:15 修改: 2026-06-17 10:22
|
| go.mongodb.org/mongo-driver |
CVE-2026-2303 |
中危 |
v1.14.0 |
1.17.7 |
CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2303
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-02-10 20:17 修改: 2026-06-17 10:30
|
| github.com/go-git/go-git/v5 |
CVE-2026-41506 |
中危 |
v5.13.1 |
5.18.0 |
golang: github.com/go-git/go-git: go-git: Information disclosure of HTTP authentication credentials via redirects
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41506
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-08 14:16 修改: 2026-06-17 10:46
|
| github.com/go-git/go-git/v5 |
CVE-2026-45571 |
中危 |
v5.13.1 |
5.19.1 |
github.com/go-git/go-git: go-git: Path validation flaw allows unauthorized file access
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45571
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:52
|
| github.com/go-git/go-git/v5 |
CVE-2026-71557 |
中危 |
v5.13.1 |
5.19.2 |
go-git is an extensible git implementation library written in pure Go. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-71557
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-08-07 17:17 修改: 2026-08-07 18:17
|
| github.com/go-git/go-git/v5 |
GHSA-w5pp-99ch-qj29 |
中危 |
v5.13.1 |
5.19.1 |
go-git: Malformed Git object data may cause panics or resource exhaustion
漏洞详情: https://github.com/advisories/GHSA-w5pp-99ch-qj29
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-29 19:43 修改: 2026-05-29 19:43
|
| github.com/containerd/containerd |
CVE-2026-47262 |
中危 |
v1.7.11 |
1.7.33 |
github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47262
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-07-01 19:16 修改: 2026-07-02 19:40
|
| github.com/Azure/go-ntlmssp |
CVE-2026-32952 |
中危 |
v0.0.0-20211209120228-48547f28849e |
0.1.1 |
go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32952
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:36
|
| github.com/docker/docker |
CVE-2026-33997 |
中危 |
v27.1.1+incompatible |
29.3.1 |
moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-03-31 03:15 修改: 2026-08-17 12:18
|
| github.com/docker/docker |
CVE-2026-41568 |
中危 |
v27.1.1+incompatible |
|
github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
|
| github.com/containerd/containerd |
CVE-2024-40635 |
中危 |
v1.7.11 |
1.7.27, 1.6.38 |
containerd: containerd has an integer overflow in User ID handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-40635
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-03-17 22:15 修改: 2026-06-17 07:46
|
| github.com/go-git/go-billy/v5 |
CVE-2026-44740 |
中危 |
v5.6.1 |
5.9.0 |
github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44740
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-06-01 17:17 修改: 2026-07-22 07:10
|
| golang.org/x/crypto |
CVE-2025-47914 |
中危 |
v0.40.0 |
0.45.0 |
golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47914
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:28
|
| golang.org/x/crypto |
CVE-2025-58181 |
中危 |
v0.40.0 |
0.45.0 |
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58181
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-19 21:15 修改: 2026-06-17 09:44
|
| golang.org/x/crypto |
CVE-2026-39827 |
中危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39827
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-39833 |
中危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39833
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-08-11 22:17
|
| golang.org/x/crypto |
CVE-2026-39834 |
中危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39834
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
CVE-2026-46598 |
中危 |
v0.40.0 |
0.52.0 |
golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46598
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 04:16 修改: 2026-07-23 16:10
|
| github.com/opencontainers/runc |
CVE-2024-45310 |
中危 |
v1.1.13 |
1.1.14, 1.2.0-rc.3 |
runc: runc can be tricked into creating empty files/directories on host
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2024-09-03 19:15 修改: 2026-06-17 07:54
|
| github.com/opencontainers/runc |
CVE-2026-41579 |
中危 |
v1.1.13 |
1.3.6, 1.4.3, 1.5.0-rc.3 |
runc: runc: Host filesystem integrity compromised by malicious container images
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41579
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-07-01 02:17 修改: 2026-07-02 19:36
|
| github.com/distribution/distribution/v3 |
CVE-2026-41888 |
中危 |
v3.0.0-20230519140516-983358f8e250 |
3.1.1 |
github.com/distribution/distribution: Distribution: Security bypass allows unauthorized tag deletion
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41888
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-14 18:16 修改: 2026-06-17 10:47
|
| github.com/containerd/containerd |
CVE-2025-64329 |
中危 |
v1.7.11 |
1.7.29 |
github.com/containerd/containerd: containerd: Memory exhaustion via CRI Attach implementation goroutine leaks
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64329
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-11-07 05:16 修改: 2026-06-17 09:54
|
| github.com/go-git/go-git/v5 |
CVE-2026-25934 |
中危 |
v5.13.1 |
5.16.5 |
go-git/go-git: go-git: Data integrity issue due to improper verification of pack and index files
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25934
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-02-09 23:16 修改: 2026-06-17 10:25
|
| golang.org/x/net |
CVE-2025-47911 |
中危 |
v0.42.0 |
0.45.0 |
golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47911
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:28
|
| golang.org/x/net |
CVE-2025-58190 |
中危 |
v0.42.0 |
0.45.0 |
golang.org/x/net/html: Infinite parsing loop in golang.org/x/net
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58190
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:44
|
| golang.org/x/net |
CVE-2026-25680 |
中危 |
v0.42.0 |
0.55.0 |
golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25680
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
|
| golang.org/x/net |
CVE-2026-42502 |
中危 |
v0.42.0 |
0.55.0 |
golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42502
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
|
| golang.org/x/net |
CVE-2026-42506 |
中危 |
v0.42.0 |
0.55.0 |
golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42506
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 16:16 修改: 2026-07-23 16:10
|
| github.com/sigstore/fulcio |
CVE-2026-22772 |
中危 |
v1.4.5 |
1.8.5 |
fulcio: Fulcio: Server-Side Request Forgery (SSRF) via unanchored regex in MetaIssuer URL validation
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22772
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-01-12 21:15 修改: 2026-06-17 10:20
|
| github.com/go-git/go-git/v5 |
CVE-2026-45570 |
低危 |
v5.13.1 |
5.19.1 |
go-git is an extensible git implementation library written in pure Go. ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45570
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-27 15:16 修改: 2026-06-17 10:52
|
| github.com/docker/docker |
CVE-2025-54410 |
低危 |
v27.1.1+incompatible |
25.0.13, 28.0.0 |
github.com/moby/moby: Moby's Firewalld reload removes bridge network isolation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-54410
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2025-07-30 14:15 修改: 2026-06-17 09:40
|
| github.com/go-git/go-git/v5 |
CVE-2026-33762 |
低危 |
v5.13.1 |
5.17.1 |
github.com/go-git/go-git/v5: go-git: Denial of Service via crafted Git index file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33762
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-03-31 15:16 修改: 2026-07-24 21:10
|
| golang.org/x/sys |
CVE-2026-39824 |
未知 |
v0.34.0 |
0.44.0 |
Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39824
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 2026-05-22 20:16 修改: 2026-07-23 16:10
|
| golang.org/x/crypto |
GO-2026-5932 |
未知 |
v0.40.0 |
|
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
漏洞详情:
镜像层: sha256:93ebf29abb439948f63d6ad97e5a55bd25e9427c49c8e02673854f8bf62e21f0
发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
|